MEMORY.DMP - UNEXPECTED_KERNEL_MODE_TRAP (7f)

BugCheck 7F, {8, 0, 0, 0}

Probably caused by : ntkrnlmp.exe ( nt!IopDecrementDeviceObjectRef+46 )


UNEXPECTED_KERNEL_MODE_TRAP (7f)
This means a trap occurred in kernel mode, and it's a trap of a kind
that the kernel isn't allowed to have/catch (bound trap) or that
is always instant death (double fault).  The first number in the
bugcheck params is the number of the trap (8 = double fault, etc)
Consult an Intel x86 family manual to learn more about what these
traps are. Here is a *portion* of those codes:
If kv shows a taskGate
        use .tss on the part before the colon, then kv.
Else if kv shows a trapframe
        use .trap on that value
Else
        .trap on the appropriate frame will show where the trap was taken
        (on x86, this will be the ebp that goes with the procedure KiTrap)
Endif
kb will then show the corrected stack.
Arguments:
Arg1: 00000008, EXCEPTION_DOUBLE_FAULT
Arg2: 00000000
Arg3: 00000000
Arg4: 00000000

Debugging Details:
------------------

BUGCHECK_STR:  0x7f_8

TSS:  00000028 -- (.tss 28)
eax=00000000 ebx=88b8ee70 ecx=00000000 edx=00000000 esi=00000000 edi=87c0b5d8
eip=8042524a esp=afefcc38 ebp=afe7cc74 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
nt!IopDecrementDeviceObjectRef+0x46:
8042524a c20800          ret     8
Resetting default scope

DEFAULT_BUCKET_ID:  INTEL_CPU_MICROCODE_ZERO

PROCESS_NAME:  winmgmt.exe

LAST_CONTROL_TRANSFER:  from 00000000 to 8042524a

STACK_TEXT: 
afe7cc74 00000000 87f17200 87f171f0 89033b40 nt!IopDecrementDeviceObjectRef+0x46

STACK_COMMAND:  .tss 0x28 ; kb

FOLLOWUP_IP:
nt!IopDecrementDeviceObjectRef+46
8042524a c20800          ret     8

SYMBOL_STACK_INDEX:  0

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  45ec3c8f

SYMBOL_NAME:  nt!IopDecrementDeviceObjectRef+46

FAILURE_BUCKET_ID:  0x7f_8_VRF_nt!IopDecrementDeviceObjectRef+46

BUCKET_ID:  0x7f_8_VRF_nt!IopDecrementDeviceObjectRef+46

Followup: MachineOwner


2: kd> .tss 28
eax=00000000 ebx=88b8ee70 ecx=00000000 edx=00000000 esi=00000000 edi=87c0b5d8
eip=8042524a esp=afefcc38 ebp=afe7cc74 iopl=0         nv up ei pl zr na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010246
nt!IopDecrementDeviceObjectRef+0x46:
8042524a c20800          ret     8

2: kd>  !thread
THREAD 87e63da0  Cid 308.b44  Teb: 7ffdb000  Win32Thread: ba0f7ec0 RUNNING
Impersonation token:  e2b7a030 (Level Impersonation)
Owning Process 88a93d60
Wait Start TickCount    10694982      Elapsed Ticks: 0
Context Switch Count    676                   LargeStack
UserTime                  0:00:00.0015
KernelTime                0:00:00.0031
Start Address KERNEL32!BaseThreadStartThunk (0x77e5b740)
Win32 Start Address wbemcomn!CExecQueue::_ThreadEntry (0x6567b770)
Stack Init afe7d000 Current afe7cca0 Base afe7d000 Limit afe7a000 Call 0
Priority 9 BasePriority 8 PriorityDecrement 0 DecrementCount 0

ChildEBP RetAddr  Args to Child
00000000 8042524a 00000000 00000000 00000000 nt!KiTrap08+0x41
afe7cc74 00000000 87f17200 87f171f0 89033b40 nt!IopDecrementDeviceObjectRef+0x46

2: kd> !pcr
PCR Processor 2 @89046000
 NtTib.ExceptionList: afe7cd48
     NtTib.StackBase: afe7cdf0
    NtTib.StackLimit: afe7a000
  NtTib.SubSystemTib: 00000000
       NtTib.Version: 00000000
   NtTib.UserPointer: 00000000
       NtTib.SelfTib: 7ffdb000

             SelfPcr: 89046000
                Prcb: 89046120
                Irql: 00000000
                 IRR: 00000000
                 IDR: ffffffff
       InterruptMode: 00000000
                 IDT: 8904a008
                 GDT: 89050988
                 TSS: 89050908

       CurrentThread: 87e63da0
          NextThread: 00000000
          IdleThread: 8904ada8

2: kd> !cpuinfo
CP F/M/S Manufacturer  MHz Update Signature Features
 0 15,2,9 GenuineIntel 2389 0000000000000000 00002fff
 1 15,2,9 GenuineIntel 2389 0000000000000000 00002fff
TargetInfo::ReadMsr is not available in the current debug session
 2 15,2,9 GenuineIntel 2389>0000000000000000<00002fff
 3 15,2,9 GenuineIntel 2389 0000000000000000 00002fff


관련 kb
http://support.microsoft.com/default.aspx/kb/842465
http://support.microsoft.com/kb/303268/en-us
http://support.microsoft.com/kb/909665/en-us
http://support.microsoft.com/kb/276069/en-us
http://support.microsoft.com/kb/891722/en-us
http://support.microsoft.com/kb/814789/en-us
http://support.microsoft.com/kb/309065/en-us
http://support.microsoft.com/kb/160671/en-us
http://support.microsoft.com/kb/835281/en-us
http://support.microsoft.com/kb/137539/en-us